Senior Security Engineer

muonspace; United States; Hybrid; USD 193,000 - 218,000; Full time

Benefits offered by this job

Competitive equity grant

Comprehensive benefits

Hybrid/remote work options

Health, dental, vision insurance

401(k) retirement plan

Paid time off

Job summary

muonspace is seeking a senior security engineer to safeguard infrastructure, data, and personnel across endpoints, networks, cloud environments, and identity systems. This role blends hands-on security work with compliance ownership for frameworks like NIST 800-171 and ITAR/EAR. The position is hybrid with three days onsite at the San Jose, CA office or fully remote from an approved U.S.

location. You will design EDR/XDR tooling, manage IAM, cloud security, SIEM, and drive security reviews

Qualifications

• 5+ years of information security or security engineering experience.
• Hands-on experience with EDR/XDR platforms (CrowdStrike or SentinelOne).
• Experience operating enterprise vulnerability scanners (Tenable, Qualys, Rapid7 or equivalent).
• Working knowledge of Okta or Azure AD administration and IAM principles.
• Cloud security proficiency in AWS (IAM, VPC, security groups, CloudTrail, GuardDuty, Config).
• Familiarity with SIEM platforms (Splunk, Elastic, etc.).
• Solid networking fundamentals (firewalls, proxies, DNS security, segmentation).
• Familiarity with frameworks: NIST 800-171, CMMC, SOC 2, ISO 27001.
• Strong written and verbal communication with engineers and leadership.

Responsibilities

• Design, deploy, and tune endpoint detection and response tooling.
• Architect and operate network security controls including firewall and VPN.
• Run vulnerability management lifecycle including scanning and remediation.
• Administer IAM platforms (Okta, AWS IAM) including SSO and access reviews.
• Build SIEM detections and incident response playbooks.
• Review security of new tools and architecture prior to deployment.
• Manage cloud security posture in AWS (IAM, S3, security groups, CloudTrail).
• Maintain docs and support audits; contribute to security policy.

Skills

EDR/XDR experience

Vulnerability management

IAM administration

Cloud security (AWS)

SIEM knowledge

Networking fundamentals

Compliance knowledge

Communication skills

Tools

CrowdStrike

SentinelOne

Tenable

Qualys

Rapid7

Okta

Azure AD

Splunk

Job description

Role overview

A senior security engineer is needed to independently safeguard infrastructure, data, and personnel across endpoints, networks, cloud environments, and identity systems. The position combines hands-on technical security work with compliance ownership for frameworks like NIST 800-171 and ITAR/EAR controls. It is a hybrid role based out of a San Jose, CA office (three days onsite) or fully remote from an approved U.S. location.

Responsibilities

• Design, deploy, and tune endpoint detection and response tooling across macOS and Windows fleets, including alert triage and incident handling.
• Architect and operate network security controls such as firewalls, IDS/IPS, segmentation, and VPN infrastructure.
• Run the vulnerability management lifecycle: scanning, prioritization, remediation coordination with engineering, and closure tracking.
• Administer and harden IAM platforms (Okta, AWS IAM) including SSO, conditional access, privileged access reviews, and lifecycle automation.
• Build SIEM detections, response playbooks, and ongoing monitoring for security-relevant signals.
• Conduct security reviews of new tools, vendors, and architectural changes prior to deployment.
• Manage cloud security posture across AWS, including IAM policy hygiene, S3 protections, security group reviews, and CloudTrail/GuardDuty oversight.
• Maintain documentation, support audits, and contribute to security policy development as the environment evolves.

Requirements

• 5+ years in information security or security engineering roles.
• Hands-on experience with EDR/XDR platforms such as CrowdStrike or SentinelOne.
• Practical experience operating enterprise vulnerability scanners (Tenable, Qualys, Rapid7, or comparable).
• Working knowledge of Okta or Azure AD administration and IAM principles.
• Cloud security proficiency in AWS, including IAM, VPC, security groups, CloudTrail, GuardDuty, and Config.
• Familiarity with SIEM platforms (Splunk, Sentinel, Elastic, etc.) for log analysis and detection engineering.
• Solid networking fundamentals spanning firewalls, proxies, DNS security, segmentation, and packet analysis.
• Working knowledge of compliance frameworks such as NIST 800-171, CMMC, SOC 2, or ISO 27001.
• Strong written and verbal communication skills with both engineers and leadership audiences.

Nice to have

• Relevant certifications such as CISSP, GIAC, CEH, or AWS Security Specialty.
• Infrastructure-as-code and CI/CD pipeline security experience using Terraform or CloudFormation.
• Background supporting environments subject to ITAR/EAR export control requirements.

Benefits and work setup

• Salary range: $193,000–$218,000 plus a competitive equity grant and comprehensive benefits.
• Hybrid schedule (three days onsite in San Jose) or fully remote from approved U.S. states.
• Medical, dental, and vision insurance, 401(k), short- and long-term disability, and life insurance.
• Three weeks of paid vacation for new hires, 12 paid holidays, unlimited sick time, and paid parental leave.